certificate.go

package main

import (
	"errors"
	"fmt"
	"path/filepath"
	"strings"

	"github.com/spf13/afero"
)

const (
	CertificatePath = "/certs"
)

// Certificate holds config a certificate
type Certificate struct {
	Name string
	Fs   afero.Fs
}

// NewCertificate returns a new Certificate
func NewCertificate(name string, fs afero.Fs) *Certificate {
	cert := &Certificate{
		Name: name,
		Fs:   fs,
	}

	return cert
}

// FindAllCertificates scans the /certs directory for .pem files and returns a collection of Certificates
func FindAllCertificates(fs afero.Fs) ([]*Certificate, error) {
	var certs []*Certificate

	files, err := afero.ReadDir(fs, CertificatePath)
	if err != nil {
		return nil, err
	}

	for _, file := range files {
		name := file.Name()

		if !strings.HasSuffix(name, ".pem") {
			continue
		}

		cert := NewCertificate(name, fs)
		certs = append(certs, cert)
	}

	return certs, nil
}

// VerifyCertificates returns an error if no valid certificates are found
func VerifyCertificates(fs afero.Fs) error {
	certs, err := FindAllCertificates(fs)

	if err != nil || len(certs) == 0 {
		return errors.New("No certificates found")
	}

	for _, cert := range certs {
		log.Infof("Found certificate: %s", cert.Name)
	}

	return nil
}

// FindCertificateForHost returns the Certificate associated with the given hostname
func FindCertificateForHost(hostname string, fs afero.Fs) (*Certificate, error) {
	certs, err := FindAllCertificates(fs)
	if err != nil {
		return nil, fmt.Errorf("Unable to scan for available certificates: %s", err)
	}

	for _, cert := range certs {
		if cert.belongsToHost(hostname) {
			return cert, nil
		}
	}

	return nil, fmt.Errorf("Unable to find certificate for %s", hostname)
}

// FullPath returns the full path of a certificate file
func (c *Certificate) FullPath() string {
	return filepath.Join(CertificatePath, c.Name)
}

func (c *Certificate) belongsToHost(host string) bool {
	baseCertName := strings.Split(c.Name, ".pem")[0]

	return host == baseCertName
}

func (c *Certificate) isExist() bool {
	exists, err := afero.Exists(c.Fs, c.FullPath())
	if err != nil {
		log.Errorf("Unable to check certificate: %s", err)
	}

	return exists
}